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Interview Summary 


Application No. 

10/797,773 


Applicant(s) 

RAYES ET AL. 


Examiner 

DANT B. SHAIFER 
HARRIMAN 


Art Unit 
2134 





All participants (applicant, applicant's representative, PTO personnel): 

(1 ) DANT B. SHAIFER HARRIMAN . (3) Carl Rees . 

(2) Kambiz Zand . (4) . 

Date of Interview: 11 July 2008 . 

Type: a)^ Telephonic b)^ Video Conference 

c)\Z\ Personal [copy given to: 1)^ applicant 2)^ applicant's representative] 

Exhibit shown or demonstration conducted: d)|II| Yes e)^ No. 
If Yes, brief description: . 

Claim(s) discussed: 1 and 14 . 

Identification of prior art discussed: Thomsen (US Patent No. 7194004)) . 

Agreement with respect to the claims f)\3 was reached. g)n was not reached. h)|EI N/A. 



Substance of Interview including description of the general nature of what was agreed to if an agreement was 
reached, or any other comments: See Continuation Sheet . 

(A fuller description, if necessary, and a copy of the amendments which the examiner agreed would render the claims 
allowable, if available, must be attached. Also, where no copy of the amendments that would render the claims 
allowable is available, a summary thereof must be attached.) 

THE FORMAL WRITTEN REPLY TO THE LAST OFFICE ACTION MUST INCLUDE THE SUBSTANCE OF THE 
INTERVIEW. (See MPEP Section 713.04). If a reply to the last Office action has already been filed, APPLICANT IS 
GIVEN A NON-EXTENDABLE PERIOD OF THE LONGER OF ONE MONTH OR THIRTY DAYS FROM THIS 
INTERVIEW DATE, OR THE MAILING DATE OF THIS INTERVIEW SUMMARY FORM, WHICHEVER IS LATER, TO 
FILE A STATEMENT OF THE SUBSTANCE OF THE INTERVIEW. See Summary of Record of Interview 
requirements on reverse side or on attached sheet. 



/Kambiz Zand/ 

Supervisory Patent Examiner,AU2134 

Examiner Note: You must sign this form unless it is an Examiner's signature, if required 

Attachment to a signed Office action. 

U.S. Patent and Trademark Office 
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Summary of Record of Interview Requirements 



Manual of Patent Examining Procedure (MPEP), Section 713.04, Substance of Interview lUlust be Made of Record 

A complete written statement as to the substance of any face-to-face, video conference, or telephone interview with regard to an application must be made of record in the 
application whether or not an agreement with the examiner was reached at the interview. 

Title 37 Code of Federal Regulations (CFR) § 1.133 Interviews 

Paragraph (b) 

In every instance where reconsideration is requested in view of an interview with an examiner, a complete written statement of the reasons presented at the interview as 
warranting favorable action must be filed by the applicant. An interview does not remove the necessity for reply to Office action as specified in §§ 1 .1 11 , 1 .1 35. (35 U.S.C. 1 32) 



37 CFR §1 .2 Business to be transacted in writing. 
All business with the Patent or Trademark Office should be transacted in writing. The personal attendance of applicants or their attorneys or agents at the Patent and 
Trademarl^ Office is unnecessary. The action of the Patent and Trademark Office will be based exclusively on the written record in the Office. No attention will be paid to 
any alleged oral promise, stipulation, or understanding in relation to which there is disagreement or doubt. 



The action of the Patent and Trademark Office cannot be based exclusively on the written record in the Office if that record is itself 
incomplete through the failure to record the substance of interviews. 

It is the responsibility of the applicant or the attorney or agent to make the substance of an interview of record in the application file, unless 
the examiner indicates he or she will do so. It is the examiner's responsibility to see that such a record is made and to correct material inaccuracies 
which bear directly on the question of patentability. 

Examiners must complete an Interview Summary Form for each interview held where a matter of substance has been discussed during the 
interview by checking the appropriate boxes and filling in the blanks. Discussions regarding only procedural matters, directed solely to restriction 
requirements for which interview recordation is othenwise provided for in Section 812.01 of the Manual of Patent Examining Procedure, or pointing 
out typographical errors or unreadable script in Office actions or the like, are excluded from the interview recordation procedures below. Where the 
substance of an interview is completely recorded in an Examiners Amendment, no separate Interview Summary Record is required. 

The Interview Summary Form shall be given an appropriate Paper No., placed in the right hand portion of the file, and listed on the 
"Contents" section of the file wrapper. In a personal interview, a duplicate of the Form is given to the applicant (or attorney or agent) at the 
conclusion of the interview. In the case of a telephone or video-conference interview, the copy is mailed to the applicant's correspondence address 
either with or prior to the next official communication. If additional correspondence from the examiner is not likely before an allowance or if other 
circumstances dictate, the Form should be mailed promptly after the interview rather than with the next official communication. 

The Form provides for recordation of the following information: 

- Application Number (Series Code and Serial Number) 

- Name of applicant 

- Name of examiner 

- Date of interview 

- Type of interview (telephonic, video-conference, or personal) 

- Name of participant(s) (applicant, attorney or agent, examiner, other PTO personnel, etc.) 

- An indication whether or not an exhibit was shown or a demonstration conducted 

- An identification of the specific prior art discussed 

- An indication whether an agreement was reached and if so, a description of the general nature of the agreement (may be by 
attachment of a copy of amendments or claims agreed as being allowable). Note: Agreement as to allowability is tentative and does 
not restrict further action by the examiner to the contrary. 

- The signature of the examiner who conducted the interview (if Form is not an attachment to a signed Office action) 

It is desirable that the examiner orally remind the applicant of his or her obligation to record the substance of the interview of each case. It 
should be noted, however, that the Interview Summary Form will not normally be considered a complete and proper recordation of the interview 
unless it includes, or is supplemented by the applicant or the examiner to include, all of the applicable items required below concerning the 
substance of the interview. 

A complete and proper recordation of the substance of any interview should include at least the following applicable items: 

1 ) A brief description of the nature of any exhibit shown or any demonstration conducted, 

2) an identification of the claims discussed, 

3) an identification of the specific prior art discussed, 

4) an laentiTication of the principal proposed amendments of a substantive nature discussed, unless these are already described on the 
Interview Summary Form completed by the Examiner, 

5) a brief identification of the general thrust of the principal arguments presented to the examiner, 

(The identification of arguments need not be lengthy or elaborate. A verbatim or highly detailed description of the arguments is not 
required. The identification of the arguments is sufficient if the general nature or thrust of the principal arguments made to the 
examiner can be understood in the context of the application file. Of course, the applicant may desire to emphasize and fully 
describe those arguments which he or she feels were or might be persuasive to the examiner.) 

6) a general indication of any other pertinent matters discussed, and 

7) if appropriate, the general results or outcome of the interview unless already described in the Interview Summary Form completed by 
the examiner. 

Examiners are expected to carefully review the applicant's record of the substance of an interview. If the record is not complete and 
accurate, the examiner will give the applicant an extendable one month time period to correct the record. 

Examiner to Check for Accuracy 

If the claims are allowable for other reasons of record, the examiner should send a letter setting forth the examiner's version of the 
statement attributed to him or her. If the record is complete and accurate, the examiner should place the indication, "Interview Record OK" on the 
paper recording the substance of the interview along with the date and the examiner's initials. 



Continuation Sheet (PTOL<413) 



Application No. 10/797,773 



Continuation of Substance of Interview including description of the general nature of what was agreed to if an 
agreement was reached, or any other comments: 

The following was discussed in the phone interview: 

I. Request clarification on rejection of Claim 14 

a. The Office Action does not clearly allege: 

i. What aspect of the references is a "malicious act" 

II. What aspect of the references teaches "determining whether a malicious act 

caused the security event" 

ill. What aspect of the references teaches "if a malicious act caused the security 
event, then providing information.., to a security decision controller." 
iv. What aspect of the references teaches "if a malicious act did not cause the 
security event, then removing the user from the elevated risk group." 

II. Request clarification regarding suggestion / motivation to combine the references 

III. Proposed Amendments to Claim 1 
a. Option 1: see [0042]-[0043] 

1. (Previously presented) A method, comprising the computer-implemented steps of: 
in a security controller that is coupled, through a network, to a network device having a 
first network address assigned from a first subset of addresses within a first 
specified pool associated with normal network users: 

determining a user identifier associated with the network device that has caused a 

security event in the network; in response to the security event, causing the network device to acquire a ne-w 
second network address that is selected from a second subset of addresses 
within a second specified pool associated with suspected malicious network users; 

wherein causing the network device to acquire a new network address comprises causing the network device to 
request a new network address; wherein the second subset of addresses is different from the first subset of 
addresses; and configuring one or more security restrictions with respect to the new network 

address. 



b. Option 2: see ~[0003]-[0004] 

1. (Previously presented) A method, comprising the computer-implemented steps of: 
in a security controller that is coupled, through a network, to a network device having a 
first network address assigned from a first subset of addresses within a first 

specified pool associated with normal network users: determining a user identifier associated with the network device 
that has caused a security event in the network; wherein the security event is an event that indicates at least one of: a 
possible denial of service attack, possible IP address spoofing, extraneous requests for network addresses, and 
possible MAC address spoofing; in response to the security event, causing the network device to acquire a new 
network address that is selected from a second subset of addresses within a second specified pool associated with 
suspected malicious network users; wherein the second subset of addresses is different from the first subset of 
addresses; and configuring one or more security restrictions with respect to the new network address. 

Zand, proposed that if both suggested amendments to claim 1 were incorporated into all of the present independent 
claims, then the amendments would overcome the art of record. 



